推荐一款特别的Linux版本
推荐一款特别的Linux版本(名字以后再说吧,弄得我都不想做自己的了。),以下是它的全部特征:偶在网吧,没事的时候找到的,还没试验过。不知道有没有WEB界面。
[*]based on Linux kernel 2.6[*]support for Reiser4[*]in-kernel interface descriptions[*]in-kernel IP address descriptions[*]centralized, unified system configuration - Flatconf[*]interactive command-line interface with autocompletion - fcc[*]English and Polish translations。[*]IPv4 support[*]IPv6 support (partially)[*]IPsec support[*]ESP, AH[*]static keying[*]simple dynamic keying via IKEv1 - ipsec-tools' racoon[*]VLAN support (in Linux thanks to Candelatech)[*]802.1Q VLAN on Ethernet devices[*]MACVLAN[*]IP traffic shaping[*]HTB - enhanced HTB.init[*]TBF with ESFQ[*]Wonder Shaper[*]IP filtering[*]powerful zone-based firewall[*]DiffServ marking basing on QoS characteristics (ASN DiffServ tags)[*]bulk - eg. downloads, P2P[*]office - eg. web browsing, email[*]media - eg. streaming media, VoIP[*]txt - eg. IM, IRC, SSH[*]sys - eg. DNS, TCP ACKs[*]decreasing TCP MSS to path MTU[*]removing IP DF flag[*]masquerading[*]DNAT[*]custom rules[*]apart of standard Netfilter functionality:[*]transparent proxy - BalaBit's tproxy[*]application layer packet classification - l7-filter[*]passive OS fingerprinting[*]IP routing[*]static routing[*]multitable routing[*]multipath routing (random, wrandom, rr, drr)[*]dynamic routing[*]OSPFv2 (Quagga), with dynamic path costs[*]PIM-SM (multicast) - patched pimd[*]Atheros WiFi devices - MadWiFi improved by Lintrack team[*]tested chipsets: AR5211, AR5212, AR5213[*]parts of IEEE 802.11h and 802.11d needed to satisfy the ETSI EN 301 893 requirements (DFS, TPC)[*]Super A/G support: bursting mode, fast frames, compression[*]easy regdomain changing (ar5k)[*]Virtual AP (VAP) support: up to 4 interfaces on one device (AP, station, monitor)[*]WDS support (standards-conforming)[*]AP clients isolation[*]Wireless Multimedia Extensions (WME) support[*]MAC address policies[*]full WPA and WPA2 (RSN) support - great hostapd and wpa_supplicant[*]PSK, EAP-TLS, EAP-TTLS, EAP-PEAP[*]embedded RADIUS server[*]Ethernet devices - all that Linux supports (most on market)[*]Ethernet bonding[*]weighted round-robin (wrr) mode developed by Lintrack team[*]dynamic wrr weights[*]2-seconds reaction to link loss[*]support for IP addresses on slave interfaces[*]works with WPA on Madwifi interfaces[*]Ethernet bridging with Spanning Tree Protocol support[*]transparent ("cheap") Ethernet encryption (ccrypt)[*]does not need higher MTU[*]does not fragment frames[*]PPPoE support - patched Roaring Penguin's RP-PPPoE[*]PPPoE client[*]PPPoE relay agent[*]PPPoE server[*]PAP/CHAP authentication[*]local IP address pool[*]RADIUS support[*]supports ASN RADIUS dictionary[*]bandwidth limits[*]pps limits[*]TCP connections limits[*]server-side client firewall[*]server-side QoS traffic shaping[*]SFQ[*]per-client HTB queue[*]prioritizing traffic basing on ASN DiffServ tags[*]different bandwidth limits for localmedia-tagged traffic (eg. locally generated multimedia streams)[*]IP redirections with optional randomness[*]per-client HTTP content filter settings[*]redirection URL[*]content groups to match[*]web domains to match[*]solid-state, reliable RADIUS queue[*]possibility to obtain client IP address from RADIUS reply[*]IP tunneling: GRE, IPIP, SIT[*]OpenVPN support[*]point-to-point mode[*]IP tunneling / Ethernet bridging[*]TCP/UDP transport[*]static PSK and SSL modes[*]HotSpot network access - ChilliSpot[*]HTTP proxy - Squid[*]caching[*]in-RAM cache storage[*]content filtering[*]customized and enhanced version of squidGuard[*]URL and domain lists from:[*]Open Directory Project (dmoz.org) (thanks to iSAK project for great tools)[*]http://cri.univ-tlse1.fr/documentations/cache/squidguard_en.html[*]advertisements and announcements distribution support - red[*]DNS cache and DHCP server - dnsmasq[*]real-time per-IP link quality measurements - ifquald[*]ICMP echo test (latency, packet loss) - reliability[*]iperf bandwidth test - performance[*]SNMP agent - Net-SNMP[*]SNMPv2 and simple SNMPv3 support[*]engine for quick snmpd extensions[*]fetching arbitrary netfilter rule counters[*]fetching all information about link monitored by ifquald[*]easy to use package manager: pkg[*]multiple repositories[*]repository with almost 150 packages[*]tight, system-wide integration with SSL/TLS[*]automatic time synchronization via NTPv4Apart of that, a technically skilled user will find the following software in it:
[*]ClamAV[*]ISC DHCP[*]exim Internet Mailer[*]FreeRADIUS[*]with rlm_netvim_pools[*]htop[*]Kismet[*]l2tpd from rp-l2tp[*]lighttpd[*]Links (from creators of great Ronja)[*]linux-atm[*]GNU Midnight Commander[*]monit[*]mtr[*]MySQL[*]ndiswrapper[*]Nmap[*]olsrd[*]OpenSSH (from great OpenBSD project)[*]PHP[*]rt2x00[*]Vim (with Tab autocompletion ;-)[*]vsftpd[*]wavemon 公布。。。
同感!
但不过这玩意放出来,不知又毁了多少"青年"自己摸索探索的积极性。 http://prdownloads.sourceforge.net/lintrack/lintrack-mini-2.0.iso?downloadhttp://www.lintrack.org/
虚拟机里测试了一下 确实不错的 txwwy 好厉害,竟然自己找到了(我刚看到短消息)。本想今天再告诉大家的(今天我值班)~~~~:L
对偶来说这个发行版最特别的地方是用了FCC。也是偶在找到FCC后才发现的LINTRACK。偶的计划中就有写这样一个SHELL的打算。
还不清楚这个发行版有没有WEBADMIN。望 txwwy 等用过的朋友告知~~。
今天也顺便告诉大家另一个软件:ARPSTAR,一个内核的模块,应对ARP SPOOF 的,不过只能用于2.6系列内核。 原帖由 txwwy 于 2007-5-17 01:28 发表 http://bbs.routerclub.com/images/common/back.gif
http://prdownloads.sourceforge.net/lintrack/lintrack-mini-2.0.iso?download
http://www.lintrack.org/
虚拟机里测试了一下 确实不错的
不知道是不是我的RP问题,在试的时候碰到2个问题,尤其最后一个问题:Q
1.在Vmware不能识别SCSI硬盘,使用IDE硬盘模式正常。
2.最:Q 的是不知道登陆用户和密码?找了半天没有看到哪里提示有登陆的账户密码:L 没有WEB界面的,但是在计划增加的 原帖由 LanTian 于 2007-5-17 11:17 发表 http://bbs.routerclub.com/images/common/back.gif
不知道是不是我的RP问题,在试的时候碰到2个问题,尤其最后一个问题:Q
1.在Vmware不能识别SCSI硬盘,使用IDE硬盘模式正常。
2.最:Q 的是不知道登陆用户和密码?找了半天没有看到哪里提示有登陆的账户密码:L
第一个问题:不支持 VMWARE 下的SCSI硬盘,网站上有说明的
第二个问题:给定的登陆用户:root,密码 asn。
两个问题都说明你没仔细看安装说明。 没看ROADMAP,才知道WEB INTERFACE 还是计划中的。今天看了下,也贴在这里:
[*]documentation[*]better configuration system and package management[*]web interface[*]support for other architectures[*]better Atheros driver[*]support for FreeRADIUS and ARA[*]basic support for mobile ad-hoc mesh networks (probably batman)[*]better support for servers of popular Internet services[*]some IDS like Snort or hlbr[*]better overall reliability
刚才安装了下,安装完毕是140M多。还不大~~
所包含的东西比我知道的多了1/3~~~
[ 本帖最后由 DreamCat 于 2007-5-17 12:20 编辑 ] shell 界面不太友好,不过适合自己修改 界面用的是FCC,还算不错的,用起来也简单。
包括LINTRACK,pointwrt,flatconf和一些其他东西都是 ASN 的项目,http://projects.asn.pl/。很强!ASN 是波兰的一家ISP,同时也进行开源软件开发,成立于2004年。
好算明白了为什么LINTRACK为什么用 asn 做密码了。
今天如果晚上不忙,偶先翻译一篇文章~
HB2K与偶同感~~~哎~~~~真打击偶的积极性,不过偶自己的还要做! 原帖由 DreamCat 于 2007-5-17 12:11 发表 http://bbs.routerclub.com/images/common/back.gif
第一个问题:不支持 VMWARE 下的SCSI硬盘,网站上有说明的
第二个问题:给定的登陆用户:root,密码 asn。
两个问题都说明你没仔细看安装说明。
:$ 下载过来光盘直接安装的,在光盘上面没有找到说明。
后来才在网站上的Wiki documentationServices 看到安装和使用的说明。 哎,这么好的东西也没几个人有兴趣了。 刚联系了下 pjf,LINTRACK的开发人员之一,说是一个月内会有很多文档放出来。 确实现在相关的文档很少,找了半天也没有多少有用的